The newest AI malware vs. 40 years of hacker culture
Source: YouTube · IBM Technology · published Jan 28, 2026 · 39:31
Security professionals and executives often prioritize different cybersecurity aspects: CEOs focus on strategic threats like AI vulnerabilities and fraud, while CISOs prioritize immediate threats like ransomware and supply chain disruptions. The episode highlights that both groups must align around resilience as the key objective, requiring security teams to speak the language of business to bridge this gap.
Key Takeaways:
• CEOs and CISOs have differing priorities but can align by focusing on resilience and communicating risk in business terms.
• Void Link represents the first documented AI-generated malware framework, showing how AI accelerates threat development while still requiring human guidance.
• Organizations often sacrifice operational resilience for data protection compliance; experts urge prioritizing critical services over audit checkmarks.
• Targeting cyber crime supply chains, such as the takedown of Red VDS, serves as an effective defensive strategy to disrupt attackers.
• The Hacker Manifesto's principles remain relevant, though the landscape has evolved with much higher stakes and blurred lines between hacking and cybercrime.
Security ultimately comes down to business decisions about acceptable risk. Security professionals must communicate in business terms to bridge the gap between technical and executive priorities.
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
People literally do their security programs just around how they can pass an audit. An audit that's never saved me from getting breached. >> All that and more on security intelligence. >> Hello and welcome to Security Intelligence, IBM's weekly cyber security podcast where our expert panelists turn the biggest industry news stories into practical takeaways you can use. I'm your host, Matt Kazinski, buried in 9 in of snow here in Philadelphia. Joining me today are three people who feel much warmer than I do. Suja Visen, VP security products. Dave Bales, Exforce Instant Command and host of the Not the Situation Room podcast. And making his debut, Dustin Haywood, aka Evilmog, senior technical staff member for IBM X Force. And before I move on, I just have to ask Evilmog, is that a Final Fanta…